Tyler Finethy
@coder.bsky.social
Engineering Manager at Datadog | MSc CS | Former Posit/RStudio
Always curious how sketchy emails come from the real domain. This one’s from PayPal.com, here's how:
1. Sign up for PayPal Developer
2. Click "Invite Your Friends!"
3. Set your Name to "PayPal USDT. You have successfully ..."
That shows up as "You have an invite from [x]"
Sanitize user input 😱
1. Sign up for PayPal Developer
2. Click "Invite Your Friends!"
3. Set your Name to "PayPal USDT. You have successfully ..."
That shows up as "You have an invite from [x]"
Sanitize user input 😱
August 18, 2025 at 7:21 PM
Always curious how sketchy emails come from the real domain. This one’s from PayPal.com, here's how:
1. Sign up for PayPal Developer
2. Click "Invite Your Friends!"
3. Set your Name to "PayPal USDT. You have successfully ..."
That shows up as "You have an invite from [x]"
Sanitize user input 😱
1. Sign up for PayPal Developer
2. Click "Invite Your Friends!"
3. Set your Name to "PayPal USDT. You have successfully ..."
That shows up as "You have an invite from [x]"
Sanitize user input 😱
save 5 minutes coding to spend 2 extra hours fixing it
April 8, 2025 at 4:11 PM
save 5 minutes coding to spend 2 extra hours fixing it
I built an mcp for building mcps for building mcps and now my computer is sentient
i hope you all said please and thank you to chatgpt
i hope you all said please and thank you to chatgpt
March 21, 2025 at 3:50 PM
I built an mcp for building mcps for building mcps and now my computer is sentient
i hope you all said please and thank you to chatgpt
i hope you all said please and thank you to chatgpt
design empty containers to stay upright with a spoon inside
February 20, 2025 at 1:52 PM
design empty containers to stay upright with a spoon inside
someone suggested this SQL trick to bypass the lack of trailing comma support 🤯
SELECT a
, b
, c
FROM ...
SELECT a
, b
, c
FROM ...
February 12, 2025 at 7:24 PM
someone suggested this SQL trick to bypass the lack of trailing comma support 🤯
SELECT a
, b
, c
FROM ...
SELECT a
, b
, c
FROM ...
This is what I call hard hitting journalism
I Tasted Honda's Spicy Rodent-Repelling Tape
And I will do it again unless someone stops me.
haterade.substack.com
February 11, 2025 at 9:25 PM
This is what I call hard hitting journalism
deepseek sounds like a spacecraft - when will it reach mars?
January 27, 2025 at 8:53 PM
deepseek sounds like a spacecraft - when will it reach mars?
Every time my heart wants to use WASM, my brain tells me to suck it up and use JavaScript 😢
January 25, 2025 at 8:25 PM
Every time my heart wants to use WASM, my brain tells me to suck it up and use JavaScript 😢
egg prices continuing to go up is all part of the plan 🙃
January 22, 2025 at 12:43 PM
egg prices continuing to go up is all part of the plan 🙃
I know it’s cold out but NY has issued an urgent call for type O+ and O- blood donations — you don’t need all that blood do you?
www.nybc.org/new-york-blo...
www.nybc.org/new-york-blo...
NEW YORK BLOOD CENTER ISSUES URGENT CALL FOR O+ AND O- DONORS
New York Blood Center (NYBC) has issued an urgent call for type O+ and O- blood donations. This dangerous shortage is impacting local hospitals, and is also a disturbing national trend, with type O sh...
www.nybc.org
January 21, 2025 at 12:20 PM
I know it’s cold out but NY has issued an urgent call for type O+ and O- blood donations — you don’t need all that blood do you?
www.nybc.org/new-york-blo...
www.nybc.org/new-york-blo...
another day another build failure
January 17, 2025 at 1:26 PM
another day another build failure
Elon watched the hunger games and said wow the capital seems like a cool fun place
January 16, 2025 at 10:43 AM
Elon watched the hunger games and said wow the capital seems like a cool fun place
First week at Datadog, couldn’t be more excited
January 14, 2025 at 1:02 PM
First week at Datadog, couldn’t be more excited
Looking for a responsible NY politician, requirements: don’t spend $800 million on a billionaire’s stadium, don’t hire your family, and don’t pay McKinsey millions to explain how trash cans work. It’s a pretty low bar.
January 12, 2025 at 5:25 PM
Looking for a responsible NY politician, requirements: don’t spend $800 million on a billionaire’s stadium, don’t hire your family, and don’t pay McKinsey millions to explain how trash cans work. It’s a pretty low bar.
Is anyone else’s only known fact about Greenland that it’s the “icy” one, while Iceland is the “green” one?
January 8, 2025 at 6:49 AM
Is anyone else’s only known fact about Greenland that it’s the “icy” one, while Iceland is the “green” one?
Park City ski patrol deserve a living wage—and while we’re at it so does everyone else just scraping by
January 5, 2025 at 10:55 PM
Park City ski patrol deserve a living wage—and while we’re at it so does everyone else just scraping by
Microtransactions should automatically make a game 18+
January 1, 2025 at 11:35 PM
Microtransactions should automatically make a game 18+
Passkeys improve the login experience, but many implementations don’t invalidate them after a password change, leaving a backdoor. This happened to me.
Whenever one authentication method is updated, all existing sessions and alternative methods should be invalidated.
Whenever one authentication method is updated, all existing sessions and alternative methods should be invalidated.
Microsoft Confirms Password Deletion for 1B Users | Hacker News
news.ycombinator.com
December 20, 2024 at 3:39 PM
Passkeys improve the login experience, but many implementations don’t invalidate them after a password change, leaving a backdoor. This happened to me.
Whenever one authentication method is updated, all existing sessions and alternative methods should be invalidated.
Whenever one authentication method is updated, all existing sessions and alternative methods should be invalidated.
The solution “we named our temp files etilqs so people stopped blaming us when apps filled up their disk drives” describes challenges in software perfectly
github.com/sqlite/sqlit...
github.com/sqlite/sqlit...
github.com
December 9, 2024 at 12:25 PM
The solution “we named our temp files etilqs so people stopped blaming us when apps filled up their disk drives” describes challenges in software perfectly
github.com/sqlite/sqlit...
github.com/sqlite/sqlit...
After experiencing phone theft and subsequent fraud, here’s three hard-learned lessons:
1. Set up an iCloud Recovery Key, now.
2. Avoid SMS-based 2FA, use an authenticator app secured by a second password.
3. Remove bank accounts from services you don’t use, like PayPal.
Stay safe!
1. Set up an iCloud Recovery Key, now.
2. Avoid SMS-based 2FA, use an authenticator app secured by a second password.
3. Remove bank accounts from services you don’t use, like PayPal.
Stay safe!
Set up a recovery key for your Apple Account - Apple Support
A recovery key is an optional security feature that helps improve the security of your Apple Account. If you lose access to your account, you can use your recovery key to reset your password and regai...
support.apple.com
December 8, 2024 at 6:53 PM
After experiencing phone theft and subsequent fraud, here’s three hard-learned lessons:
1. Set up an iCloud Recovery Key, now.
2. Avoid SMS-based 2FA, use an authenticator app secured by a second password.
3. Remove bank accounts from services you don’t use, like PayPal.
Stay safe!
1. Set up an iCloud Recovery Key, now.
2. Avoid SMS-based 2FA, use an authenticator app secured by a second password.
3. Remove bank accounts from services you don’t use, like PayPal.
Stay safe!
it’s probably easier to break into a bank than have Apple release a device activation lock 🥲
a cartoon of spongebob standing in front of a window with the words " oh " written on it
ALT: a cartoon of spongebob standing in front of a window with the words " oh " written on it
media.tenor.com
December 7, 2024 at 7:14 PM
it’s probably easier to break into a bank than have Apple release a device activation lock 🥲
bring back keyboards with personality and spunk
Back to my roots with my first computer today, the Amstrad CPC 464
November 27, 2024 at 7:04 PM
bring back keyboards with personality and spunk
change my mind: updating nodejs dependencies is a form of torture
November 26, 2024 at 7:11 PM
change my mind: updating nodejs dependencies is a form of torture
Okay, what if schools rebranded english classes to the dark arts? Get kids excited to read the forbidden manuscripts.
November 25, 2024 at 6:09 PM
Okay, what if schools rebranded english classes to the dark arts? Get kids excited to read the forbidden manuscripts.